As an admin, retain an escrow copy of users' private keys

We get some request related to that aspect (like 1/2 a month, by direct email to support).
For example: How can I can recover the passphrase, I have the secret key

Thanks for the write up, @candlerb, it’s a good summary of the options.